Computer got worse after scans

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Tourangh, May 24, 2005.

  1. Tourangh

    Tourangh Master Sergeant

    After i followed the required steps in the sticky for removing spyware, viruses and trojans my computer got worse. Evrytime i start the computer the internet does not work and almost evrything else dosent work. evry program has some error and IE freezes the second i got to a different site than homepage. I have windows 98 and ran all scans except the one for winXP listed on stick thread.
     
  2. jeff6303j

    jeff6303j Private E-2

  3. Tourangh

    Tourangh Master Sergeant

    I did not get Hijack this b/c I was worried about messing up my computer by deleting the wrong things but ill try to follow tutorial
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Tourangh,

    If you have not, please follow ALL the steps in this Sticky thread
    READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    [​IMG] Download HijackThis 1.99.1

    [​IMG] Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    [​IMG] Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    [​IMG]Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    [​IMG]Run HijackThis and save your log file.

    [​IMG] Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    [​IMG]Need help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  5. Tourangh

    Tourangh Master Sergeant

    i got hijack this but my computer for some reason(has been going on for while) wont let me open a pop window. for example the attachment link opens up a seperate screen and my computer wont open it. i will try to get on a different computer. If that does not work could i possibly e-mail the log file to someone. Thx for help
     
  6. jeff6303j

    jeff6303j Private E-2

    If you cant get it to post, feel free to just copy/paste it into a pm to me and I will creat a txt file for it.

    thnx

    gl hf
    jeff
     
  7. Tourangh

    Tourangh Master Sergeant

    Heres whats going on with my computer. Basicly when i run any program( IE, Winamp, Realone ....) My computer becomes extremely laggy or freezes. I do ctrl+alt+del to close whatever iam running to hopefully solve problem. What i get is ddhelp[not responding]. i try to close that and 95% of the time the computer gets stuck and i have to reboot. this happens almost evrytime i run anything. Before i ran required spyware scans on sticky thread computer was messed up but still ran most programs. only problem was i knew i was infected and got constant pop ups and lagged.
     
  8. Tourangh

    Tourangh Master Sergeant

    iam using linux live cd to post this and having a very hard time getting on internet with windows to post log but ill try.thx
     
  9. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    jeff6303j,

    I appreciate your help in the Spyware Forum but the first thing you should know. NEVER request a user to go into a PM for any reason. Keep everything in the open forum. Thats why we have Mods and Admins, to convert and remove such logs or if we see a problem.
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Tourangh,

    If you cant attach a HJT log to your post, copy and paste the log inline here and I will convert it for you.
     
  11. jeff6303j

    jeff6303j Private E-2

    Well like i said if it would be easier, you could jsut PM me log and I will post so you dont have to open up another window and crash your computer.

    Anyways, gl hf,
    Jeff
     
  12. Tourangh

    Tourangh Master Sergeant

    Here is HJT log

    By the way i fixed R3 and F1 already by going through tutorial
     

    Attached Files:

    Last edited by a moderator: May 25, 2005
  13. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Download LSP-Fix

    After download is complete, Run LSP-Fix

    Check the Box labeled "I know what I'm doing" and then click on the aklsp.dll file (in the “Keep” section) to select it.

    Then, Select the >> button to move aklsp.dll into the Remove section.

    Now, click the Finish Button. When the Repair Summary box appears, click OK.

    (Note: If the file aklsp.dll is already in the remove section, then just click FINISH.)


    Now, after you complete this above, you will need to download and run Spybot S&D. Before you run the scan go into Advanced Mode and uncheck ALL of the ignored items.

    Afterwards run a full scan and remove all found infections. After you have comepleted this reboot and run the below online scans if possible.


    TrendMicro Online Scan
    Bitdefender online scan
    RavAntivirus online scan <-- select Auto Clean then click Scan My PC
    TrojanScan online scan


    After you run the above scans if possible, reboot and post a fresh HJT log. If you still cant attach it paste it inline and I will convert it for you.
     
  14. Tourangh

    Tourangh Master Sergeant

    I got Lsp-fix and am about to run it. i tried to run online scans with linux but wont work on it. If i try them on windows computer crashes. Only ways i can run computer is in safemode and linux(using now). I have Norton and already ran it a few days ago but virus definitions are a few months old. How crucial is it to run internet scans?
     
  15. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    In this case you really need to run them, however there is something else we can try.

    Download the following two files, create a folder on your desktop, call it TSC. Save these 2 files there!

    Sysclean Package

    Pattern.zip

    Once you have these downloaded into the folder you just created, double click the file sysclean.com

    When the system cleaner loads, click SCAN to start the scanner.

    Let me know the results!
     
  16. AbbySue

    AbbySue MajorGeeks Administrator

    Jeff, As garrick already told you in a previous post
    I can't understand why you would then post repeating your suggestion that the user PM you with their log? If a user can't attach their log for whatever reason we have no problem with them copy/pasting it so we can convert it for them as long as they let us know they copy/pasted because they couldn't do the attachment. Requesting or offering the option to send the log to your privately is a generous offer, however it defeats the purpose of the forum. As previously stated: Support of any kind should never be taken outside of the forum..it starts here it gets finished here.

    Additionally, most HJT logs will exceed the character limit permitted in PM's thus causing even more frustration for the user. One more thing to keep in mind is that often we get new members who are not familiar with using the forum software so they don't know 'how' to attach a file to a post. If a user says they can't attach a file but has not said why, ask why. Sometimes all it takes is a 'how to' explanation. If it's a different issue then by all means ask that they copy/paste it into a post and we will then convert it.

    Thanks!:)
     
  17. jeff6303j

    jeff6303j Private E-2

    I started typing that comment before that was ever posted, I am ussually at work and get phone calls in the middle of typing posts, so unfortently cant read what isnt there. So therefore, I offered to convert to log and attach. Ussually if the mods want to be inline then changed they request, hadnt done that yet, so I offered.

    Im sorry that you see it as a bad thing, I was not meaning to disturb the public forums or request that I help in PM, I was mearly attempting to make the process go alittle smoother/faster since no one had offered to convert log and offer to convert for him.

    gl hf
     
  18. AbbySue

    AbbySue MajorGeeks Administrator

    Your post came in 5 minutes after bj requested you not ask members to PM you with logs so I was helping out bj by further explaining to you why we ask that members not take things outside of a thread. As far as I'm concerned that's the end of it so lets drop it and get back to helping the original poster.:)
     
  19. Tourangh

    Tourangh Master Sergeant

    This might be a dumb question but when i ran the sysclean it came up with a few trojans. Should i delete the files or move them. And where do i move it?
     
  20. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    It should automatically remove them. If it doesnt just delete them yourself. Also, I hate to request this but a new pattern file was released today, if you like you can download the new one and do a new scan. It may find a few more things, it may not. Its up to you!

    Let me know!
     
  21. Tourangh

    Tourangh Master Sergeant

    Ok. I ran the sysclean and find 100+ virus, ran spybot and used Lsp-fix. Heres is the new HJT log. So plz convert for me. Also i tried getting on internet and had same ddhelp problem that i explained before.

    Inline HJT log attached!
     

    Attached Files:

    Last edited by a moderator: May 26, 2005
  22. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    I have to run out for a few hours. I will check back and post you a fix shortly.

    Hang in there!
     
  23. Tourangh

    Tourangh Master Sergeant

    ok. Thanks alot for the help so far. Also i found sysclean scan very helpfull. Found alot of problems Norton left behind even though noton definitions are few months old.
     
  24. Tourangh

    Tourangh Master Sergeant

    One thing i thought id mention is that my windows updates arent very recent but evrytime i try to dowload updates the popup comes up and says please wait download may take ....(somthing like that) i leave it for an hour and check on it and it never makes any progress.
     
  25. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    After we get your system cleaned up you need to download and install Internet Explorer 6.0 SP1.

    Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled

    Please look in Add or Remove Programs for the following and Uninstall them if found:

    EliteToolBar

    FastSeeker Toolbar


    Now scan with HijackThis and Check the Boxes for the following:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\SYSTEM\SearchBar.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://v4.windowsupdate.microsoft.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS\EliteToolBar\EliteToolBar version 60.dll
    O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)

    O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16
    O4 - HKLM\..\Run: [autoupdate] rundll32 C:\WINDOWS\SYSTEM\WINUP2DATE.DLL,SHStart
    O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\vzpzkk.exe
    O4 - Startup: naka.exe

    O8 - Extra context menu item: &FastSeeker Search - res://C:\Program Files\FastSeeker\FastSeekerToolbar011203.dll/cmsearch.html
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusear...?p=ZPYYYYYYYYUS

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\SYSTEM\maxspeed.exe (file missing)
    O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\SYSTEM\maxspeed.exe (file missing)

    O15 - Trusted Zone: *.boxsearch.net
    O15 - Trusted Zone: *.brdatahost.com
    O15 - Trusted Zone: *.media-motor.net
    O15 - Trusted Zone: http://www.neededware.com

    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/19ca0b90c7465f...ip/RdxIE601.cab
    O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab
    O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} - http://download.redswoosh.net/Insta...rsinstaller.cab
    O16 - DPF: {C8BAC37C-A8D2-425E-B7FC-80B9537FB14A} - http://www.spyblast.com/download/SBFS.cab
    O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} - http://download.rfwnad.com/cab/crack.CAB
    O16 - DPF: {F5820AD3-9B20-423E-B2AA-7AF2B4055746} (CRegistryDownload Class) - http://download.paltalk.com/download/0.x/regdload.cab
    O16 - DPF: {A27AD582-5BE5-4C2D-82F0-48B24FE02040} - http://www.adshooter.com/pop_shoote...00/SYSsfitb.cab
    O16 - DPF: ppctlcab - http://69.44.122.156/scanner/ppctlcab.cab
    O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
    O16 - DPF: {FF65677A-8977-48CA-916A-DFF81B037DF3} - http://download.overpro.com/WildApp.cab
    O16 - DPF: {539DA0E0-74A7-11D9-9669-0800200C9A66} - http://www.ouchvideo.com/mmviewer_ic13.cab
    O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) - http://www.180searchassistant.com/180saax.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/M.../bridge-c18.cab

    O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - (no file)

    Make sure All Browser Windows are Closed when you Click FIX.

    NOW:
    Navigate to and DELETE the following if they should remain:

    C:\WINDOWS\EliteToolBar ←–– Delete this whole folder if it exist!

    C:\Program Files\FastSeeker ←–– Delete this whole folder if it exist!

    C:\WINDOWS\START MENU\PROGRAMS\STARTUP\NAKA.EXE

    C:\WINDOWS\SYSTEM\SearchBar.htm

    C:\WINDOWS\SYSTEM\WINUP2DATE.DLL

    C:\WINDOWS\vzpzkk.exe

    AUNPS2.DLL <-- Search for this file and delete when found!

    NEXT:
    Run CCleaner and Spybot S&D and have Spybot fix what it finds.
    Note: Dont forget to update Spybot S&D by selecting "Search For Updates"

    Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
    Temporary Files
    Temporary Internet Files
    Recycle Bin


    And Click OK.


    Reboot to Normal Windows , Scan with HijackThis and attach the new log.

    Along with the HJT log follow the below instructions also!


    1 - Please EXTRACT all files from Qoologic Tool to its own folder - C:\Program Files\QoologicFinder . Then, DoubleClick Find-Qoologic.bat to run the tool. It should produce a log - Please attach that with your next post!

    2 - Please EXTRACT all the files form RKFiles Tool to its own folder named C:\Program Files\RKTOOL. Then, Please boot to SAFE MODE and DoubleClick rkfiles.bat to run the tool. Let it run and then, when it finishes, look for a log at C:\Log.txt and please attach that log.


    Now come back here and post both logs as attachments.
     
  26. Tourangh

    Tourangh Master Sergeant

    I ran hjt and deleted what you listed. I deleted the files manualy and while i did i also found elitesidebar folder is this same as other elitetoolbar. I also ran cclean and spybot. i will attach/post files you asked for soon.
     
  27. Tourangh

    Tourangh Master Sergeant

    Having problems with two scans but ill try again heres the HJT log.
    Tell me if attachment works.
     

    Attached Files:

  28. Tourangh

    Tourangh Master Sergeant

    Heres one of the scans. I cant get qoological to work but heres the log for the other. For Qoolgical says i need an update and i cant download the update.
     

    Attached Files:

  29. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your HJT log is clean, however your other log is loaded. We have a bit of work to do here to remove these files. Its going to be a little work so hang in there!

    Download Pocket KillBox

    Now, Copy and Paste C:\WINDOWS\SYSTEM\SHAgent.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, you will need to do the exact same thing above for EACH FILE below. DO NOT REBOOT until the LAST file has been entered! After you have entered the LAST file then reboot and post a new log from both tools.

    C:\WINDOWS\SYSTEM\netpals.dll
    C:\WINDOWS\SYSTEM\ycrwin32.dll
    C:\WINDOWS\SYSTEM\Xcite.dll
    C:\WINDOWS\SYSTEM\ClrSchP012.dll
    C:\WINDOWS\SYSTEM\c36bHs.dlltmp
    C:\WINDOWS\SYSTEM\wmconfig.cpl
    C:\WINDOWS\SYSTEM\pop317.dll
    C:\WINDOWS\SYSTEM\goldnew2b.dll
    C:\WINDOWS\SYSTEM\delfin.dll
    C:\WINDOWS\SYSTEM\pspv.cip
    C:\WINDOWS\SYSTEM\c0mmand.com
    C:\WINDOWS\SYSTEM\kalvojx32.exe
    C:\WINDOWS\SYSTEM\error32.dat
    C:\WINDOWS\SYSTEM\kalvahd32.exe
    C:\WINDOWS\SYSTEM\eliteosn32.exe
    C:\WINDOWS\SYSTEM\eliteeui32.exe
    C:\WINDOWS\SYSTEM\hsumy.exe
    C:\WINDOWS\SYSTEM\bmoxx.exe
    C:\WINDOWS\SYSTEM\pspv.cip
    C:\WINDOWS\SYSTEM\doolsav.dat
    C:\WINDOWS\SYSTEM\kalvahd32.exe
    C:\WINDOWS\csrss.exe
    C:\WINDOWS\puauk.dat
    C:\WINDOWS\installer.exe
    C:\WINDOWS\systb.exe
    C:\WINDOWS\setup_silent_26221.exe
    C:\WINDOWS\CYP.exe
    C:\WINDOWS\icont.exe
    C:\WINDOWS\dressTurkey.exe
    C:\WINDOWS\searchen.dat
    C:\WINDOWS\del.tmp
    C:\WINDOWS\WhackAd.exe
    C:\WINDOWS\zipinst.exe
    C:\WINDOWS\arkru.dll
    C:\WINDOWS\MTE1Mzc6ODoxMg.exe
    C:\WINDOWS\ceres.dll
    C:\WINDOWS\daemon.dll
    C:\WINDOWS\sysupudt.exe
    C:\WINDOWS\wupdsnff.exe
    C:\WINDOWS\thin-143-1-x-x.exe
    C:\WINDOWS\Buddy.exe
     
  30. Tourangh

    Tourangh Master Sergeant

    When do you want me to update IE? also i deleted the files you told me. I ran scan again but froze, So ill run again. Do you also want a HJT log?
     
  31. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Yes, go ahead and update to IE 6.0 SP1.

    After you have updated reboot and post a fresh HJT log along with the 2 other logs.
     
  32. Tourangh

    Tourangh Master Sergeant

    Here are the three logs also updated IE. Iam still having same ddhelp problem. I searched for ddhelp on my computer and found it 3 times: c:\windows\system\ddhelp , c:\windows\sysbckup\ddhelp , and c:\windows\vcm\ddhelp . Could there possibly be somthing wrong with this file?.
     

    Attached Files:

  33. Tourangh

    Tourangh Master Sergeant

    Can only attach 2 files so heres other.
     

    Attached Files:

  34. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your logs appear to be clean, what problems are you having at the moment?
     
  35. Tourangh

    Tourangh Master Sergeant

    Evrytime i run internet, 90% of the programs on my computer my mouse starts lagging is the best word for it. I then do ctrl+alt+del and it says ddhelp[notresponding]. i try to end task but usualy the computer freezes and i have to restart. This happens just aobut every time.
     
  36. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    That ddhelper is related to Microsoft DirectDraw Helper.

    Do you have Norton AntiVirus or have you had this installed?
     
  37. Tourangh

    Tourangh Master Sergeant

    I have norton but it hasent been updated for a while. Definitions are a few months old. Ran scant same time as others
     
  38. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    I am so stupid! I apologize for this but I got this thread confused! We still have some files to remove.

    What version of NAV do you have installed? Is it running fine or it is corrupted? By this I mean does it have "Error" next to email scanning?

    Now, Copy and Paste C:\WINDOWS\EPMPUU.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\JNONZ.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\UNADBEH.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\JNONZ.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\BETTER.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\NEWINS~1.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\TYIYRRT.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\UNADBEH.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\BANAMMB.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\SYSTEM\POLALL1L.001 into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\SYSTEM\kalvahd32.exe into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click YES.

    Allow Killbox to reboot your system, afterwards post 2 new logs from the tools.
     
  39. Tourangh

    Tourangh Master Sergeant

    Ok lol. I have NAV 2000 w/ firewall. Iam not realy sure what you mean be e-mail scan. i dont use e-mail scan or dont have it. Ill delete files an post new logs for now.
     
  40. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Ah, that version doesnt have what Im thinking about, personally I would get rid of that out of date version and install AVG or another one of our recommended free ones.
     
  41. Tourangh

    Tourangh Master Sergeant

    HJt isnt working so ill reinstall heres other logs.
     

    Attached Files:

  42. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Reboot into Safe Mode with the viewing of hidden files and folders enabled.

    Navigate to and delete the following file:

    C:\WINDOWS\NEWINS~1.EXE

    After you complete the above, reboot and attach new logs from HJT and the tools.

    What problems are you having with HJT?
     
  43. Tourangh

    Tourangh Master Sergeant

    sorry for such a long wait for an update. :rolleyes: But heres what happend. I lost the linux live cd so i did not have an easy means of accessing the internet. So I got the computer completely wiped. I also went on vacation within a week of the last thing i posted(been there ever since and now iam possibly moving here)
     
  44. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

  45. Tourangh

    Tourangh Master Sergeant

    Thanks for all the help and sorry for not posting.
     
  46. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your Welcome!

    Glad I could help!:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds